root/vm: links for dnssec